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From: Lucas, Stephanie A. <slucas@bakerlaw.com> 

Sent: Wednesday, October 31, 2018 8:03 PM 

To: Breaches, Data (SCA); 93HNotifications 

Cc: Kitchen, David E. 

Subject: RE: Notification Regarding Security Incident for Posternak Blankstein & Lund, LLP 

Attachments: PBL_Suppiemental Regulatory Letter dated October 31 2018_Massachusetts.pdf 


Hello, 

Please find the supplemental notification letter sent to the Attorney General on October 31, 2013 for Posternak, 
Blankstein & Lund LLP's security incident. 


Stephanie Lucas 

Associate 

BakerHosletier 

11601 Wilshire Boulevard j Suite 1400 
Los Angeles, CA 90025-0509 
T+1.310.442.8847 

si ucas@ba kerlaw. com 
bakerlaw.com 



From: Lucas, Stephanie A. 

Sent: Friday, August 31, 2018 2:51 PM 

To: 'data.breaches@state.ma.us' <data.breaches@state.ma.us> 

Cc: Kitchen, David E. <dkitchen@bakerlaw.com> 

Subject: Notification Regarding Security Incident for Posternak Blankstein & Lund, LLP 
Hello, 


Please find the notification letter and letter sample sent to the Attorney General on August 31, 2018 for Posternak 
Blankstein & Lund, LLP's recent security incident. 


Stephanie Lucas 

Associate 



11601 Wilshire Boulevard | Suite 1400 
Los Angeles, CA 90025-0509 
T+1.310.442.8847 


slucas@bakerlaw.com 

bakerlaw.com 



This email is intended only for the use of the party to which it is 
addressed and may contain information that is privileged. 
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confidential, or protected by law, if you are not the intended 
recipient you are hereby notified that any dissemination, copying 
or distribution of this email or its contents is strictly prohibited, 
if you have received this message in error, please notify us immediately 
by replying to the message and deleting it from your computer. 

Any tax advice in this email is for information purposes only. The content 
of this email is limited to the matters specifically addressed herein 
and may not contain a full description of all relevant facts or a 
complete analysis of all relevant issues or authorities. 

Internet communications are not assured to be secure or clear of 
inaccuracies as information could be intercepted, corrupted, lost, 
destroyed, arrive late or incomplete, or contain viruses. Therefore, 
we do not accept responsibility for any errors or omissions that are 
present in this email, or any attachment, that have arisen as a result 
of e-maii transmission. 



Baker & Hostetler llp 

Key Tower 

127 Public Square, Suite 2000 
Cleveland, OH 44114-1214 

T 216.621,0200 
F 216.696.0740 

October 31,2018 www.bakerlaw.com 

David E. Kitchen 
direct: dial: 216.861.7060 
tiicitclien@bakerlavv.com 

Via Email tData.Breaches@state.ma.us and 

93HNotifications@state.ma.nsl 

Via Overnight Mail 

Attorney General Maura Healey 
Office of the Attorney General 
One Ashburton Place 
Boston, Massachusetts 02108 

Re: Supplemental Incident Notification 

Attorney General Healey:: 

On August 31, 2018, on behalf of our client, Postemak Blanlcstein & Lund LLP 
(“Postemak”), we notified your office of a phishing incident. In that notice, we explained that 
Postemak began notifying the parties that had provided the personal information to Postemak 
(“Data Providers”) and offered to provide notification to the potentially affected individuals on 
behalf of those Data Providers, and as well as complimentary credit monitoring services for 
eligible individuals, call center services, and required regulator notifications. 

Since our August 31,2018 notice, forty six additional Data Providers have requested that 
Postemak provide the offered sendees on their behalf. Postemak notified three hundred forty 
three additional Massachusetts residents Of the incident in writing between September 1.2, 2018 
and October 24,2018 in accordance with Mass. Gen. Laws. Ch. 93H § 3(b) in substantially the 
same form as the letter provided to your office on August 31, 2018. Postemak has provided all 
eligible individuals with a complimentary one-year membership in credit monitoring and identity 
theft protection services from Experian. Postemak has also provided a telephone number for 
potentially affected individuals to call with any questions they may have. 


Atlanta Chicago Cincinnati Cleveland Columbus Costa Mesa Denver 

Houston Los Angeles New York Orlando Philadelphia Seattle Washington, DC 







October 31, 2018 
Page 2 

To date, Postemak has provided notice to a total of four hundred seventy seven 
Massachusetts residents. Postemak provided notice to the individuals as soon as possible and 
without undue delay after Postemak received affirmative responses from the Data Providers that 
Postemak notified of the incident. 

Please do not hesitate to contact me if you have any questions regarding this matter. 


Sincerely, 


David E. Kitchen 
Partner 


cc: 


Director of the Office of Consumer Affairs and Business Regulation 
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v -FOLD on this line and place in shipping pouch with bar cod© and delivery address visible 

1. Fold the first printed page in half and use as the shipping label. 

2. Place the label in a waybill pouch and affix it to your shipment so that the barcode portion 
of the label can be read and scanned. 

3. Keep the second page as a receipt for your records. The receipt contains the terms and 
conditions of shipping and information useful for tracking your package. 


Legal Terms and Conditions 

Tendering packages by using this system constitutes your agreement to the service conditions for the transportation of your 
shipments as found in the applicable FedEx Service Guide, available upon request. FedEx will not be responsible for any claim 
in excess of the applicable declared vaiue, whether the result of loss, damage, delay, non-delivery, misdelivery, or 
misinformation, unless you declare a higher vaiue, pay an additional charge, document your actual loss and file a timely claim. 
Limitations found In the applicable FedEx Service Guide apply. Your right to recover from FedEx for any loss, including intrinsic 
value of the package, loss of sales, income interest, profit, attorney's fees, costs, and other forms of damage whether direct, 
incidental, consequential, or special is limited to the greater of 100 USD or the authorized declared vaiue. Recovery cannot 
exceed actual documented loss. Maximum for Items of extraordinary value Is 500 USD, e.g. jewelry, precious metals, negotiable 
Instruments and other items listed in our Service Guide. Written claims must be filed within strict time limits, see applicable 
FedEx Service Guide. FedEx will not be liable for loss or damage to prohibited Items in any event or for your acts or omissions, 
including, without limitation, Improper or insufficient packaging, securing, marking or addressing, or the acts or omissions of the 
recipient or anyone else with an interest in the package. See the applicable FedEx Service Guide for complete terms and 
conditions. To obtain information regarding how to file a claim or to obtain a Service Guide, please cail 1-800-GO-FEDEX 
{1-800-463-3339}. 


https ://cloud.psship. com/index.php 
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package id 
0328131 
ship date 
Wed, Oct 31 2018 
to 

Attorney General Maura 
Healey 

Office of the Attorney 
General 

1 ASHBURTON PL 
BOSTON, MA 02108-1518 
United States 
3104428824 
residential address 
No 

return label 
No 

notification type 
Label Creation 
Exception 
Delivery 
Tendered 

notification recipients 
msweeney@bakerlaw.com 


from 

Stephanie Lucas (10633) 
Baker Hostetler LLP 
11601 Wilshire Boulevard 
Suite 1400 

Los Angeles, CA 90025- 
0509 
US 

8608847 

billing 

Penny Hamilton.Estate 
planning for ...ilton 
(112576.112576.000001) 
operator 

Margaret Sweeney 
310-442-8824 
msweeney@bakerlaw.com 
create time 

10/31/18, 11:46AM 



vendor 

FedEx 

tracking number 
783533425484 
service 

FedEx Priority Overnight® 
packaging 

FedEx® Envelope 
signature 

Adult Signature Required 
courtesy quote 
26.64 

Quote may not reflect all 
accessorial charges 
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